ServerRoot /etc/apache2
Mutex file:/var/lock/apache2/ default
PidFile /var/run/apache2.pid
ServerTokens productonly
ServerSignature Off
HostnameLookups Off
User www-data
Group www-data
ServerName name.tld.com

RLimitCPU 25 25
RLimitMEM 500000000 500000000
RLimitNPROC 20 20

Timeout 60
KeepAlive On
MaxKeepAliveRequests 60
KeepAliveTimeout 8

ServerLimit             16
StartServers            16
MaxClients              512
MinSpareThreads         32
MaxSpareThreads         128
ThreadsPerChild         64
MaxRequestsPerChild     100000

GracefulShutdownTimeout 5

DocumentRoot /home/www

DirectoryIndex index.htm index.cgi index.php index.php3 index.php4 index.php5 index.wml index.html index.shtml index.py
IndexOptions FancyIndexing NameWidth=*

<Directory /home/www>
    Options +FollowSymlinks +SymLinksIfOwnerMatch +ExecCGI -Indexes
    AllowOverride All
</Directory>

<Directory /usr/share/apache/icons>
    Options Indexes MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

AccessFileName .htaccess

<Files ~ "^\.ht">
Require all denied
</Files>

ErrorLog /var/log/apache2/error.log
ErrorLog syslog:local7
LogLevel warn

suPHP_Engine on
suPHP_AddHandler x-httpd-php
suPHP_AddHandler x-httpd-php7.0
suPHP_AddHandler x-httpd-php7.1
suPHP_AddHandler x-httpd-php7.2
suPHP_AddHandler x-httpd-php7.3
suPHP_AddHandler x-suphp-cgi

AddHandler x-httpd-php .phtml
AddHandler x-httpd-php7.0 .php70
AddHandler x-httpd-php7.1 .php71
AddHandler x-httpd-php7.2 .php72
AddHandler x-httpd-php7.3 .php73
AddHandler x-suphp-cgi .cgi .pl .py

AddType Application/x-httpd-php .php .phtml
AddType Application/x-httpd-php7.0 .php70
AddType Application/x-httpd-php7.1 .php71
AddType Application/x-httpd-php7.2 .php72
AddType Application/x-httpd-php7.3 .php73
AddType Application/x-suphp-cgi .cgi .pl .py

AddHandler server-parsed .shtml

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog     builtin
SSLSessionCache         dbm:/var/run/ssl_scache
SSLSessionCacheTimeout  300
Mutex default
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

RewriteEngine On

ExpiresActive On
ExpiresByType text/css "access plus 6 month"
ExpiresByType text/javascript "access plus 6 month"
ExpiresByType image/gif "access plus 6 month"
ExpiresByType image/jpeg "access plus 6 month"
ExpiresByType image/png "access plus 6 month"

<Files ~ "\.(js|css|gif|jpe?g|png)$">
    Header append Cache-Control "public"
</Files>

ExtendedStatus On
ProxyRequests off

TraceEnable off
NameVirtualHost "externalIP":443
Include /etc/apache2/mods-enabled/*.load
Include /etc/apache2/mods-enabled/*.conf
Include /etc/apache2/sites-enabled/